Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/ldyV_EpqT2oKvf1QJeErhcsDNrU.roa
File: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (raw, json)
Hash identifier: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=
Subject key identifier: 95:DC:95:FC:4A:6A:4F:6A:0A:BD:FD:50:25:E1:2B:85:CB:03:36:B5
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 019425FC5AA6595CC720D82226C7DD0E8BE1
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/ldyV_EpqT2oKvf1QJeErhcsDNrU.roa
Signing time: Thu 02 Jan 2025 07:48:02 +0000
ROA not before: Thu 02 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35384
IP address blocks: 176.119.223.0/24 maxlen: 24
194.156.188.0/24 maxlen: 24
2a14:60c0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:5a:a6:59:5c:c7:20:d8:22:26:c7:dd:0e:8b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Jan 2 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95dc95fc4a6a4f6a0abdfd5025e12b85cb0336b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:88:59:2c:c7:c7:8d:a4:97:3b:dd:b7:fd:
2f:70:9d:42:33:9e:33:61:59:a6:d4:64:df:c2:a2:
07:8a:13:04:95:e3:10:3d:ad:08:d1:aa:dc:c7:1d:
4e:42:57:e7:53:48:e6:a9:20:f2:d5:02:d1:4b:d5:
6e:d6:2d:ea:e7:40:08:4c:ae:b6:53:50:d8:85:7b:
e7:fd:85:ac:e9:31:da:8f:c4:63:ed:f7:ea:8c:fb:
91:5f:45:38:05:75:0a:d1:e5:75:3d:bc:e8:65:6b:
ca:3f:6d:0d:22:98:36:2e:32:b2:08:e0:02:ca:6e:
a7:5e:56:10:07:74:fe:cd:b8:22:81:50:2f:79:27:
9e:d5:39:53:7a:c2:b7:b0:6b:ad:5a:d0:c2:a2:24:
77:c7:eb:01:06:f1:b6:64:9b:86:14:a9:55:1a:79:
f1:bd:db:94:ad:26:e2:bd:de:dc:7e:ce:1c:c7:b1:
6a:c4:d2:49:ab:88:45:85:4a:47:de:35:7c:75:34:
a0:49:f1:54:09:0b:8a:25:94:64:2a:b6:91:ee:fa:
ff:53:78:ec:71:69:3d:d4:c4:9d:bb:f0:44:cc:15:
fc:23:e1:53:2b:76:3f:e4:a2:f2:88:2e:98:1f:11:
7a:1d:35:53:f2:7a:17:bc:be:ce:57:fe:d1:6d:43:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DC:95:FC:4A:6A:4F:6A:0A:BD:FD:50:25:E1:2B:85:CB:03:36:B5
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/ldyV_EpqT2oKvf1QJeErhcsDNrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.223.0/24
194.156.188.0/24
IPv6:
2a14:60c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
16:13:11:75:8d:c6:d3:b0:a7:5c:33:f3:c2:68:87:eb:a4:ea:
24:c4:bd:d8:43:0e:e1:86:67:50:76:a2:93:05:92:10:fd:53:
53:87:c6:ca:1e:c4:40:04:02:b4:3a:7a:3f:10:88:6a:0e:ca:
06:f2:de:6c:d1:2c:98:45:5e:25:00:c0:1f:36:65:88:55:69:
a1:b1:40:bb:90:02:21:8d:b8:8d:ae:68:d9:cf:29:48:12:a9:
e2:88:84:df:99:9c:da:ff:85:a0:bc:24:35:59:b5:c1:e4:d6:
8f:4b:41:02:48:f1:66:7b:54:d4:af:76:29:c8:88:32:34:da:
a1:27:2e:01:af:75:4d:f3:33:29:a0:a2:df:36:65:ae:fd:2d:
99:d6:b4:84:ff:b9:2a:5d:84:4a:43:64:b3:3b:94:fa:ad:2b:
44:0c:c8:be:c5:e6:a8:da:d2:f6:51:5a:59:3a:49:b6:7d:e1:
f7:28:a5:51:19:22:66:42:95:55:bf:7f:37:16:0a:2f:6c:33:
be:a3:d7:2e:46:98:3e:12:90:90:86:57:43:ef:f2:70:19:34:
d2:ff:ee:84:17:67:19:cc:70:4a:6a:ce:a7:64:2e:29:c5:94:
8a:23:7f:60:8c:e7:ec:24:e1:f9:47:f3:c0:ef:9c:f2:bf:60:
f8:20:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:35:44 2025 by rpki-client